Re: chmod of generated grub.cfg

[Colin Watson]

On Sun, Sep 06, 2009 at 02:29:03PM +0200, Felix Zielcke wrote:
> Currently grub-mkconfig uses chmod 444 on the newly generated grub.cfg
> Wouldn't it be better to use 400 now that we have plaintext password
> support?
> Or should we add support for a GRUB_CHMOD variable so users can override
> this setting as they please?

I'd prefer to see this done only if they set a password. A GRUB_CHMOD
variable seems overkill, though.

> Else I'd need to add a /etc/grub.d/999_chmod file in grub-installer
> which changes the mode of grub.cfg.new if the user wants to have a
> password.

I think it'd be more sensible to do this in grub-mkconfig itself - it
doesn't really fit well into the /etc/grub.d/ hook system, which is
really just for generating output.

-- 
Colin Watson                                       address@hidden